v1.9.3
lyogavin/airllmv1.9.3May 15, 2026by github-actions[bot]
AI Summary
A critical security release addressing SSRF vulnerabilities and CVEs, adding Python 3.14 support, and stabilizing UI components.
Key Highlights
- Critical security fixes for SSRF and CVE vulnerabilities
- Added Python 3.14 support
- Updated langchain-classic to 1.0.7
- Bug fixes for model toggles and Docker configurations
New Features
- SSRF protection with DNS rebinding prevention
- Python 3.14 support
Full Release Notes
<!-- Release notes generated using configuration in .github/release.yml at v1.9.3 --> ## 🔒 Security Release - Critical Updates This release includes **critical security fixes**. We strongly recommend upgrading to v1.9.3 immediately. **Security Fixes:** - SSRF vulnerability protection (LE-763) - CVE fixes from MEND/CIMS scans (LE-1123) - Updated security dependencies including langchain-classic to 1.0.7 ## What's Changed ### ✨ New Features * feat: Add SSRF protection with DNS rebinding prevention by @Jkavia in https://github.com/langflow-ai/langflow/pull/13016 * feat: Python 3.14 support by @erichare in https://github.com/langflow-ai/langflow/pull/13085 ### 🐛 Bug Fixes * fix: update security dependencies by @Jkavia in https://github.com/langflow-ai/langflow/pull/13053 * fix: pin postgres image to bookworm in docker_example by @erichare in https://github.com/langflow-ai/langflow/pull/13027 * fix: stabilize model toggle and refresh Agent dropdown after provider changes by @erichare in https://github.com/langflow-ai/langflow/pull/13113 * fix: upgrade langchain-classic to 1.0.7 by @Jkavia in https://github.com/langflow-ai/langflow/pull/13130 * fix: backport policies ToolGuard lazy imports by @erichare in https://github.com/langflow-ai/langflow/pull/13144 ### 📝 Documentation Updates * docs: SSRF protection enabled by default by @mendonk in https://github.com/langflow-ai/langflow/pull/13106 ### Others * chore: Add DESIGN.md for Langflow's visual design system by @ogabrielluiz in https://github.com/langflow-ai/langflow/pull/12830 ## 📦 Package Versions - **langflow**: 1.9.3 - **langflow-base**: 0.9.3 - **lfx**: 0.4.3 - **langflow-sdk**: 0.1.3 ## 📥 Installation ```bash pip install langflow==1.9.3 ``` ## 🐳 Docker Images ```bash docker pull langflowai/langflow:1.9.3 docker pull langflowai/langflow:latest ``` **Full Changelog**: https://github.com/langflow-ai/langflow/compare/v1.9.2...v1.9.3